aboutcode-org / aboutcode-org/dejacode

BUG: LicenseRef should not be used with License Exceptions

オープン
#318 コメント 8 件 リアクション 0 件 担当者 2 名 @hesa に割り当て済み GitHub で見る
bug design needed HighPriority integration
主要言語
Python
スター
50
フォーク
27
平均マージ
4時間 51分
マージ済み PR(30日)
11

説明

The SPDX team has specified that a non-SPDX-license-list text which is an exception should be identified with a name that starts with `AdditionRef` rather than `LicenseRef`.

So, from the SPDX perspective, this is wrong:
`some-license-key WITH LicenseRef-something-exception`
but this is right:
`some-license-key WITH AdditionRef-something-exception`

There are multiple Active license exceptions in DejaCode with SPDX key starting with "LicenseRef".
Updating them would of course have an impact on the LicenseDB and various ScanCode tools, so such an update is a big deal and would require a fair amount of work and communication/documentation.

I have created a new Query and Report in DejaCode (nexB dataspace) called License Exceptions with "LicenseRef". I am also attaching the .xlsx output from the report to this issue.

The resolution of this conflict requires some discussion.

Note that our current workaround to this problem, which is simply to construct an expression like this using the AND operator

`some-license-key AND LicenseRef-something-exception`

rather than using the operator WITH , gets us through the SPDX validator, but is not really a good long-term sustainable solution, since it avoids compliance with the latest SPDX standard.

コントリビューションガイド

コントリビューションガイドを開く

評価

この issue はまだ評価されていません。

新しい issue をメールで受け取る

初心者向けの GitHub issue を短くまとめたダイジェスト。